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Detailed Action 

1 . Claims 1 -24 have been presented for examination. 

2. Claims 1-24 have been rejected. 

Claim Objections 

3. Claim 2 5 is objected to because of the following informalities: Claim 2 recites the 
following acronyms SHA-1 and MD5. The following acronyms must be spelled out to fully 
indicate what they represent/stand for. Appropriate correction is required. 

4. Claims 7, 15, and 23, a replacement of the terms " checking/checks " (in which it may 
apply) with a term such as -match — would better render the intent of the claim limitation. 

Claim Rejections - 35 U.S.C 112 

5. Claim 2, is rejected under 1 12, second paragraph. Claim 2 recite the following limitation 
"or", this limitation renders the claim vague and indefinite, because the term "or" is considered 
to be alternative language. Therefore, the limitation renders the claim vague and indefinite, 
because it is unclear as to how the examiner should interpret the claim limitation as it relates to 
"or". 

6. Claims 7,15, and 23 are rejected under 1 12, second paragraph. Claims 7,15,and 23 recite 
the following limitation "if", this limitation renders the claim vague and indefinite, because the 
term "if" is considered to be alternative language. Therefore, the limitation renders the claim 
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vague and indefinite, because it is unclear as to how the examiner should interpret the claim 
limitation as it relates to "if. 

Information Disclosure Statement 

7. The information disclosure statement filed on July 9, 2003 has been considered. 
However, "2002/169,793" cited under Patent No is incorrectly cited. The Information 
Disclosure has been placed in the application file to reflect the changes; therefore the appropriate 
correction is required to reflect the appropriate change. 

Claim Rejections 35 U.S.C 102 

8. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 

basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

9. Claims 1-24 are rejected under 35 U.S.C. 102(b) as being anticipated by Scheussler et al 
(US Patent No. 6,366,950/Date of Patent April 2, 2002). 

Claims 1,9, and 17: 

Regarding claims 1,9, and 17, Scheussler teaches an apparatus for protecting an item of 
private information in a database (Figure 3, all features, wherein the identification number, user, 
email, and authentication are all within the database, Scheussler), wherein the item of private 
information is used as a key (Figure 3, diagram 32A and diagram 32D, wherein an index is a 
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sequence of key pointers pairs where each pointer points to a record in the database that contains 
the key value in a particular field, column 10, lines 13-22, wherein the index is sorted on the key 
values to allow rapid searching for a particular key value, Scheussler), for retrieving data from 
the database (column 10, lines 29-32, wherein retrieve the ID number from the processor and 
prepares a message to be sent to the server, wherein the server includes the identification 
database defined in Figure 2, Scheussler) comprising: 

a receiving mechanism configured to receive the item of private information (column 
6,lines 58-59, wherein the computer receives the email message, column 2, lines 35-37, wherein 
the client module that generates the message includes identification number, column 2, line 37, 
wherein the client computer includes a client module generates a message and sends the message 
over the communications medium, and column 6, lines 58-59, wherein the computer receives a 
email message, Scheussler); 

a hashing mechanism (column 5, lines 44-46, Scheussler) configured to create a hash of 
the item of private information (column 8, lines 43-44, Scheussler); and 

a storage mechanism configured to store the hash of the item of private information 
in a database (column 3, lines 64-66, Scheussler). 

Claims 2,10, and 18: 

Regarding claims 2,10, and 18, Scheussler teaches wherein the hashing mechanism is 
configured to use SHA-1 or MD5 hashing functions (column 10, lines 1-5, wherein the field 32B 
has a size of 128 bits, the ID number has a size of 44 bits, wherein fixed length is interpreted to 
be message digest 5, column 1 1, lines 46-48, wherein authenticating procedure, column 5, lines 
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57-67, wherein packet addressing, handshaking is defined to be message digest for the reason 
that it authenticate packet data, Scheussler 1 ). 

Claims 3,1 L and !2l 

Regarding claims 3,1 1, and 19, Scheussler teaches wherein the hashing mechanism is 
internal to the database (see Figure 1, diagrams 2 & 4, column 5, lines 40-45, wherein each 
computer 2, 4 has appropriate application and communications software modules, wherein the 
software modules include, Internet access software, cable modem software, two-way 
communications software, point-to-point software, the hasher software , software to retrieve and 
process the ID number from the identification module 8, Scheussler) and is transparent to an 
application (column 6, lines 21-29, wherein transparent is interpret to be a computer operation 
that does not require user intervention, in which a user is unaware that it is taking place) which 
manipulates the private information (column 6, lines 43-48, wherein communications software 
automatically converts the email into an appropriate electronic format, Scheussler). 

Claims 4 A 2, and 20: 

Regarding claims 4,12, and 20, Scheussler teaches a query mechanism (column 9, lines 
2-3) configured to perform queries containing the private information (column 9, lines 7-13, 
wherein recursive query expressions, wherein recursive is defined to be a program or task that 
can repeat itself indefinitely, Scheussler), wherein the query mechanism is configured to: 

1 The examiner interpret the MD5 to be wherein the field 32B has a size of 128 bits, the ID number has a size of 44 
bits, correspond to the MD5 claimed since MD5 is defined to be a message digest that is a widely-used 
cryptographic has function with a 128-bit hash value, and as a internet standard MD5 has been employed in a wide 
variety of security applications, and it also commonly used to check the integrity of files (column 12, lines 1 7-29, 
Scheussler). 
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receive the item of private information (column 6,lines 58-59, wherein the computer 
receives the email message, column 2, lines 35-37, wherein the client module that generates the 
message includes identification number, column 2, line 37, wherein sending the message over 
the communications medium, and column 6, lines 58-59, wherein the computer receives a email 
message, Scheussler); 

create a hash (column 5, lines 44-46, Scheussler) of the item of private information 
(column 8, lines 43-44, Scheussler); and 

query the database using the hash of the item of private information (column 8, lines 66- 
67, Scheussler). 

Claims 5,13, and 21: 

Regarding claims 5, 13, and 21, Scheussler teaches wherein the item of private 
information can include one of : 

a social security number; 

a drivers license number; 

a passport number; 

an email address (Figure 4, diagram 202 and column 6, lines 27-29, Scheussler 2 ); 

a person's name; and 

a person's mother's maiden name. 

Claims 6J4,and 22: 



2 The examiner notes that claims 5,13, and 21 does not require full examination of all claim limitations since the 
claims simply states wherein the item private information can include one of the following. Therefore, only one 
limitation was made reference to. 
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Regarding claims 6,14, and 22 Scheussler teaches wherein the hashing mechanism can be 
further configured to combine multiple items of private information prior to creating the hash 
(column 7, lines 35-40, wherein the conferencing connections can include video conferences, 
voice, chat, and data connections, and wherein the contemplated that the various types of 
conferences connection can be combined so that data connection is parallel to a voice 
connection, Scheussler). 
Claims 7,15, and 23: 

Regarding claims 7,15, and 23 Scheussler teaches wherein the hashing mechanism is 
further configured to check a column attribute in the database to see if "privacy" is enabled 
(Figure 3, diagram 32C and column 2, lines 45-48, wherein status information is interpreted to be 
determining if an item is available, Scheuusler), and if so, to create the hash of the private 
information (column 8, lines 43-44, Scheussler). 

Claims 8 A 6, and 24: 

Regarding claims 8,16, and 24 Scheussler teaches wherein the database is a Lightweight 
Directory Access Protocol (LDAP) database (column 9, lines 45-51, wherein LDAP directory 
entries are arranged in a hierarchical structure that reflects political, geographic, organizational 
boundaries, while entries representing countries appear at the top of the tree while other entries 
in the tree represent states or national organizations, and below them there may be entries 
representing people, organizational units, printers, documents, wherein the database is 
lightweight is defined to be the tree representing the directory information tree, known as DIT, to 
be a distributed LDAP database that can be hosted by more than one server, Schuessler). 
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Prior Art of Record: 

1. Scheussler et al (US Patent No. 6,366,950) discloses a communications network includes 
several computers connected to a communications medium, wherein a client computer has a 
unique identification number that is embedded within a processor. In addition, the client 
computer includes a client module which generates a message that includes the identification 
number and sends the message over the communications medium and another computer receives 
the message and retrieves the identification number from the message, wherein the computer 
processes the identification number and updates an identification database. The processing of 
the identification number and the updating of the identification database is triggered once the 
message is received. 

Point of Contact 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Helene R. Rose whose telephone number is (571) 272-0749. The 
examiner can normally be reached on 8:00am - 4:30pm M-F. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Safet Metjahic can be reached on (571) 272-4023. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 

Application Information Retrieval (PAIR) system. Status information for published applications 

may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 

applications is available through Private PAIR only. For more information about the PAIR 

system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Helene R Rose 
Technology Center 2100 
February 9, 2006 
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